CVE-2026-115454 — Large tables in data apps can bring down execution services in KNIME Hub

CVE-2026-115454

Large tables in data apps can bring down execution services in KNIME Hub PUBLISHED

Description (CNA)

An excessive resource allocation issue in the remote workflow editing capabilities of KNIME Business Hub prior to version 1.19.0 allows a authenticated attack to exhaust resources on the server side. This leads to intermittent unavailability of workflow execution functionality. A workaround is not possible.

Affected (CNA)

Vendor / product	Versions
KNIME / KNIME Business Hub	affected 0 before 1.19.0; unaffected 1.19.0

CWE

CWE-770

References

https://www.knime.com/security/advisories

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.